Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
File: ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer (raw, json)
Hash identifier: MiLvfNiPu2BWBaKI0tt2bEBLnZK95oDVzCixpkKDaxw=
Subject key identifier: 8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7941B84F96BDCC1E3D34A4939B0D4D6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198370
AS: 201047
IP: 37.18.184.0/21
IP: 2a03:4960::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:1b:84:f9:6b:dc:c1:e3:d3:4a:49:39:b0:d4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:27:34:9d:3e:82:00:3e:0e:b6:e2:01:73:f8:
31:30:cf:c2:55:2b:0a:32:ee:06:79:7d:0b:9c:24:
82:8b:23:74:35:86:95:96:ef:7f:ef:85:d2:4f:fa:
a8:c1:a5:3e:26:84:c3:ba:e4:63:57:3c:b3:22:85:
ac:e8:7b:12:be:b9:97:7a:14:a2:7c:78:9d:72:b7:
07:9b:16:ed:04:f7:ae:b8:e5:d0:18:c9:9a:7e:e3:
2c:8b:89:e5:47:07:e8:6d:84:66:02:f3:8c:a8:74:
3d:4d:64:cb:cc:11:5a:af:b0:42:89:c8:68:25:f7:
b3:03:5f:69:11:a3:95:6a:a6:d1:0c:67:54:99:d4:
b8:29:7f:f2:6f:fd:74:cd:cf:c0:9b:0c:51:89:07:
01:71:24:d8:4b:bf:f5:80:86:88:2f:84:1c:e8:73:
14:52:06:6b:ce:6d:08:b5:76:5d:15:c6:8a:cc:b4:
3d:6a:6f:a1:8a:e8:f6:e8:de:8d:10:e5:c6:55:84:
a7:f1:41:38:50:43:0f:5d:e4:37:84:47:ae:d3:63:
d4:62:37:34:31:9b:b1:ff:ea:28:24:44:9a:57:2a:
31:23:4a:d7:4d:0f:fe:a1:2b:7b:03:0d:c4:68:4d:
25:04:06:d6:eb:5c:fe:44:24:51:93:8a:c1:ba:0a:
ec:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.184.0/21
IPv6:
2a03:4960::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198370
201047
Signature Algorithm: sha256WithRSAEncryption
47:0f:5d:56:93:52:09:ed:11:42:4b:07:e9:0a:c2:bf:e1:d5:
24:51:42:d7:fe:7a:03:24:95:43:04:fa:11:ea:ed:92:66:a5:
6f:07:14:55:d3:98:3b:49:7e:6f:96:7b:25:c8:04:8e:af:e2:
17:d2:6b:9e:1d:d5:2b:3d:56:73:d5:bc:23:05:5b:a4:4b:59:
25:65:95:dd:77:57:4e:69:80:22:d1:97:e3:b1:88:e1:e8:11:
76:95:89:ff:66:72:f9:99:d9:b3:29:e1:fd:c4:7a:c1:ff:7d:
48:8d:53:aa:32:55:bd:8e:0c:ad:67:46:4d:6e:a9:8e:85:87:
b3:b7:52:ea:d4:fe:b0:03:2d:c2:0e:b4:ff:de:f5:cc:7e:f6:
4f:c4:cb:ef:18:67:af:6f:87:e3:b9:ab:3e:89:fc:71:79:da:
d9:3f:01:ae:d2:a7:de:e4:c4:01:b3:4f:15:4a:a0:0d:6d:5b:
48:8d:66:e0:6a:a6:41:d2:34:8a:02:18:3b:fa:4d:88:02:e3:
bc:da:cc:cb:25:00:1c:08:79:fd:9b:ee:e0:10:b5:c4:86:08:
58:1f:b2:80:a5:80:39:cc:3c:b3:f6:92:26:1d:79:10:f8:24:
c9:c7:ab:b8:f6:83:75:ab:21:e0:69:83:53:9c:df:86:a9:93:
d3:18:1f:d3
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAYzHlBuE+WvcwePTSkk5sNTWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAzMDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTMxZjhiZWEzM2IwMDU2NDQ2ZTMzMjFlZWRlM2ExNzBmYmQ3YzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSc0nT6CAD4OtuIBc/gxMM/CVSsK
Mu4GeX0LnCSCiyN0NYaVlu9/74XST/qowaU+JoTDuuRjVzyzIoWs6HsSvrmXehSi
fHidcrcHmxbtBPeuuOXQGMmafuMsi4nlRwfobYRmAvOMqHQ9TWTLzBFar7BCicho
JfezA19pEaOVaqbRDGdUmdS4KX/yb/10zc/AmwxRiQcBcSTYS7/1gIaIL4Qc6HMU
UgZrzm0ItXZdFcaKzLQ9am+hiuj26N6NEOXGVYSn8UE4UEMPXeQ3hEeu02PUYjc0
MZux/+ooJESaVyoxI0rXTQ/+oSt7Aw3EaE0lBAbW61z+RCRRk4rBugrsFwIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFIox+L6jOwBWRG4zIe7eOhcPvXwfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwLzYwZmMw
ZC0wZWI5LTQyNGMtYTYzMC05YTVjNzNiZmZhMjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvNjBmYzBk
LTBlYjktNDI0Yy1hNjMwLTlhNWM3M2JmZmEyMy8xL2lqSDR2cU03QUZaRWJqTWg3
dDQ2RnctOWZCOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDJRK4MA0EAgACMAcDBQAqA0lgMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwMG4gIDAxFXMA0GCSqGSIb3DQEBCwUAA4IBAQBHD11W
k1IJ7RFCSwfpCsK/4dUkUULX/noDJJVDBPoR6u2SZqVvBxRV05g7SX5vlnslyASO
r+IX0mueHdUrPVZz1bwjBVukS1klZZXdd1dOaYAi0ZfjsYjh6BF2lYn/ZnL5mdmz
KeH9xHrB/31IjVOqMlW9jgytZ0ZNbqmOhYezt1Lq1P6wAy3CDrT/3vXMfvZPxMvv
GGevb4fjuas+ifxxedrZPwGu0qfe5MQBs08VSqANbVtIjWbgaqZB0jSKAhg7+k2I
AuO82szLJQAcCHn9m+7gELXEhghYH7KApYA5zDyz9pImHXkQ+CTJx6u49oN1qyHg
aYNTnN+GqZPTGB/T
-----END CERTIFICATE-----
Generated at Fri May 3 03:37:24 2024 by rpki-client on console-fra.rpki-client.org